The following Fedora 23 Security updates need testing: Age URL 103 https://bodhi.fedoraproject.org/updates/FEDORA-2015-12739 python-kdcproxy-0.3.2-1.fc23 86 https://bodhi.fedoraproject.org/updates/FEDORA-2015-5eb2131441 conntrack-tools-1.4.2-9.fc23 82 https://bodhi.fedoraproject.org/updates/FEDORA-2015-14197 sblim-sfcb-1.4.9-4.fc23 57 https://bodhi.fedoraproject.org/updates/FEDORA-2015-16240 nagios-4.0.8-1.fc23 43 https://bodhi.fedoraproject.org/updates/FEDORA-2015-dd52a54fa1 python-pymongo-3.0.3-1.fc23 43 https://bodhi.fedoraproject.org/updates/FEDORA-2015-e7712d6c32 cyrus-imapd-2.4.18-1.fc23 43 https://bodhi.fedoraproject.org/updates/FEDORA-2015-c76c1c84cf mod_nss-1.0.12-1.fc23 31 https://bodhi.fedoraproject.org/updates/FEDORA-2015-66439aa9e2 openstack-glance-2015.1.2-1.fc23 15 https://bodhi.fedoraproject.org/updates/FEDORA-2015-84a95e39d4 perl-HTML-Scrubber-0.15-1.fc23 14 https://bodhi.fedoraproject.org/updates/FEDORA-2015-81ded368fe miniupnpc-1.9-6.fc23 13 https://bodhi.fedoraproject.org/updates/FEDORA-2015-0c153d3319 perl-IPTables-Parse-1.5-2.fc23 10 https://bodhi.fedoraproject.org/updates/FEDORA-2015-1dd5bc998f python-django-1.8.6-1.fc23 10 https://bodhi.fedoraproject.org/updates/FEDORA-2015-ca11983963 m2crypto-0.22.5-2.fc23 5 https://bodhi.fedoraproject.org/updates/FEDORA-2015-3d17682c15 putty-0.66-1.fc23 4 https://bodhi.fedoraproject.org/updates/FEDORA-2015-394835a3f6 xen-4.5.2-2.fc23 4 https://bodhi.fedoraproject.org/updates/FEDORA-2015-115c302856 kernel-4.2.6-300.fc23 3 https://bodhi.fedoraproject.org/updates/FEDORA-2015-a21f0df7e5 python-rauth-0.7.2-1.fc23 3 https://bodhi.fedoraproject.org/updates/FEDORA-2015-d02feebd15 jenkins-remoting-2.53-1.fc23 jenkins-1.625.2-2.fc23 3 https://bodhi.fedoraproject.org/updates/FEDORA-2015-1d87313b7c libpng10-1.0.64-1.fc23 3 https://bodhi.fedoraproject.org/updates/FEDORA-2015-7ebe03e30b sundials-2.6.2-11.fc23 1 https://bodhi.fedoraproject.org/updates/FEDORA-2015-decbab7c9f mingw-freeimage-3.17.0-1.fc23 1 https://bodhi.fedoraproject.org/updates/FEDORA-2015-a0ac3df0f0 ProDy-1.7.1-1.fc23 1 https://bodhi.fedoraproject.org/updates/FEDORA-2015-7852ea201b potrace-1.13-2.fc23 0 https://bodhi.fedoraproject.org/updates/FEDORA-2015-f2d45d982b COPASI-4.16-0.19.20150817git3bc4e9.fc23 0 https://bodhi.fedoraproject.org/updates/FEDORA-2015-b6b8582f4e monitorix-3.8.1-1.fc23 The following Fedora 23 Critical Path updates have yet to be approved: Age URL 16 https://bodhi.fedoraproject.org/updates/FEDORA-2015-ca2350f1c4 perl-DBD-MySQL-4.033-1.fc23 13 https://bodhi.fedoraproject.org/updates/FEDORA-2015-3c2c75120a perl-Curses-1.33-1.fc23 12 https://bodhi.fedoraproject.org/updates/FEDORA-2015-b83c6d5cda mpfr-3.1.3-2.fc23 11 https://bodhi.fedoraproject.org/updates/FEDORA-2015-45a52e68c9 prison-1.1.1-3.fc23 8 https://bodhi.fedoraproject.org/updates/FEDORA-2015-29dc0bc9f1 kdepim-4.14.10-7.fc23 5 https://bodhi.fedoraproject.org/updates/FEDORA-2015-4c0a71f8a1 perl-Carp-1.38-1.fc23 4 https://bodhi.fedoraproject.org/updates/FEDORA-2015-115c302856 kernel-4.2.6-300.fc23 2 https://bodhi.fedoraproject.org/updates/FEDORA-2015-2667fb5edb libdvdread-5.0.3-1.fc23 2 https://bodhi.fedoraproject.org/updates/FEDORA-2015-37706c9c35 mash-0.6.19-1.fc23 1 https://bodhi.fedoraproject.org/updates/FEDORA-2015-1adda0007a libbluray-0.9.1-1.fc23 1 https://bodhi.fedoraproject.org/updates/FEDORA-2015-2e33c48936 aisleriot-3.18.2-1.fc23 anjuta-3.18.2-1.fc23 at-spi2-core-2.18.3-1.fc23 bijiben-3.18.2-1.fc23 control-center-3.18.2-1.fc23 dconf-editor-3.18.2-1.fc23 eog-3.18.1-1.fc23 eog-plugins-3.16.3-1.fc23 evince-3.18.2-1.fc23 evolution-3.18.2-1.fc23 evolution-data-server-3.18.2-1.fc23 evolution-ews-3.18.2-1.fc23 evolution-mapi-3.18.2-1.fc23 gdk-pixbuf2-2.32.2-1.fc23 gedit-3.18.2-1.fc23 glib2-2.46.2-1.fc23 gnome-2048-3.18.2-1.fc23 gnome-bluetooth-3.18.1-1.fc23 gnome-calculator-3.18.2-1.fc23 gnome-desktop3-3.18.2-1.fc23 gnome-disk-utility-3.18.2-1.fc23 gnome-documents-3.18.2-1.fc23 gnome-getting-started-docs-3.18.2-1.fc23 gnome-keyring-3.18.3-1.fc23 gnome-klotski-3.18.2-1.fc23 gnome-maps-3.18.2-1.fc23 gnome-mines-3.18.2-1.fc23 gnome-nibbles-3.18.2-1.fc23 gnome-online-accounts-3.18.2.1-1.fc23 gnome-photos-3.18.2-1.fc23 gnome-robots-3.18.1-1.fc23 gnome-settings-daemon-3.18.2-1.fc23 gnome-shell-3.18.2-1.fc23 gnome-shell-extension s-3.18.2-1.fc23 gnome-sound-recorder-3.18.2-1.fc23 gnome-system-monitor-3.18.2-1.fc23 gnome-taquin-3.18.2-1.fc23 gnome-terminal-3.18.2-1.fc23 gnome-tweak-tool-3.18.1-1.fc23 gsettings-desktop-schemas-3.18.1-1.fc23 gtk3-3.18.4-1.fc23 gucharmap-3.18.2-1.fc23 gvfs-1.26.2-1.fc23 iagno-3.18.2-1.fc23 libsigc++20-2.6.2-1.fc23 libsoup-2.52.2-1.fc23 libxml++-2.40.1-1.fc23 mutter-3.18.2-1.fc23 nautilus-3.18.2-1.fc23 orca-3.18.2-1.fc23 pygobject3-3.18.2-1.fc23 swell-foop-3.18.1-1.fc23 0 https://bodhi.fedoraproject.org/updates/FEDORA-2015-2a67752b43 xorg-x11-server-1.18.0-2.fc23 0 https://bodhi.fedoraproject.org/updates/FEDORA-2015-b5c42d1d47 dbus-python-1.2.0-12.fc23 0 https://bodhi.fedoraproject.org/updates/FEDORA-2015-4b9f6ed649 perl-PathTools-3.59-1.fc23 The following builds have been pushed to Fedora 23 updates-testing audacity-2.1.2-0.7.rc1.fc23 composer-1.0.0-0.15.alpha11.fc23 dbus-python-1.2.0-12.fc23 libinput-1.1.1-1.fc23 monitorix-3.8.1-1.fc23 ovirt-engine-sdk-python-3.6.0.3-1.fc23 perl-PathTools-3.59-1.fc23 perl-Sereal-Decoder-3.006-1.fc23 perl-Time-HiRes-1.9728-1.fc23 plasma-workspace-5.4.3-3.fc23 python-importmagic-0.1.3-5.033e3efgit.fc23 python-xlrd-0.9.4-1.fc23 qtspell-0.8.1-1.fc23 tunir-0.12-1.fc23 wine-1.7.55-1.fc23 xorg-x11-server-1.18.0-2.fc23 yubico-piv-tool-1.1.2-1.fc23 yubikey-personalization-gui-3.1.23-2.fc23 zanata-parent-25-2.fc23 Details about builds: ================================================================================ audacity-2.1.2-0.7.rc1.fc23 (FEDORA-2015-51664dda77) Multitrack audio editor -------------------------------------------------------------------------------- Update Information: 2.1.2 Release Candidate 1 The final release is imminent, so we need a variety of testers to see that the big upstream change to using wxWidgets 3 is working properly for Fedora users. Please create bugs for any crashes, hangs or problems you see. -------------------------------------------------------------------------------- ================================================================================ composer-1.0.0-0.15.alpha11.fc23 (FEDORA-2015-383fa4f24e) Dependency Manager for PHP -------------------------------------------------------------------------------- Update Information: Upstream version 1.0.0alpha11 -------------------------------------------------------------------------------- ================================================================================ dbus-python-1.2.0-12.fc23 (FEDORA-2015-b5c42d1d47) D-Bus Python Bindings -------------------------------------------------------------------------------- Update Information: dbus-python-1.2.0-12.fc23 - Drop object manager patch -------------------------------------------------------------------------------- References: [ 1 ] Bug #1177659 - object_manager.patch breaks API https://bugzilla.redhat.com/show_bug.cgi?id=1177659 [ 2 ] Bug #1122018 - calling a method with different signature does not throw UnknownMethod error https://bugzilla.redhat.com/show_bug.cgi?id=1122018 -------------------------------------------------------------------------------- ================================================================================ libinput-1.1.1-1.fc23 (FEDORA-2015-2ec09a4dda) Input device library -------------------------------------------------------------------------------- Update Information: libinput 1.1.1, same code, Fedora already had all the patches. -------------------------------------------------------------------------------- ================================================================================ monitorix-3.8.1-1.fc23 (FEDORA-2015-b6b8582f4e) A free, open source, lightweight system monitoring tool -------------------------------------------------------------------------------- Update Information: This is a maintenance release that mainly fixes a Document Object Model (DOM)-based cross-site scripting (XSS) vulnerability in the monitorix.cgi file. Such vulnerability is by injection a JS code in the when parameter of the URL shown after generating the graphs. Additionally, a potential denial of service (DoS) issue was discovered in the same when parameter of the URL which could lead in the creation of an enormous amount of .png files in the imgs directory of the server. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1281979 - monitorix-3.8.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1281979 -------------------------------------------------------------------------------- ================================================================================ ovirt-engine-sdk-python-3.6.0.3-1.fc23 (FEDORA-2015-a21bf8c40f) oVirt Engine Software Development Kit (Python) -------------------------------------------------------------------------------- Update Information: Update to upstream 3.6.0.3. ---- Update to upstream 3.5.4.0. -------------------------------------------------------------------------------- ================================================================================ perl-PathTools-3.59-1.fc23 (FEDORA-2015-4b9f6ed649) PathTools Perl module (Cwd, File::Spec) -------------------------------------------------------------------------------- Update Information: This release corrects build script, improves tests and adds support for AmigaOS. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1282020 - perl-PathTools-3.59 is available https://bugzilla.redhat.com/show_bug.cgi?id=1282020 -------------------------------------------------------------------------------- ================================================================================ perl-Sereal-Decoder-3.006-1.fc23 (FEDORA-2015-9f5c943f2f) Perl deserialization for Sereal format -------------------------------------------------------------------------------- Update Information: This release fixes craches when proceessing heavily corrupted data. -------------------------------------------------------------------------------- ================================================================================ perl-Time-HiRes-1.9728-1.fc23 (FEDORA-2015-716020ae3d) High resolution alarm, sleep, gettimeofday, interval timers -------------------------------------------------------------------------------- Update Information: This release fixes type castings, compiler warnings, build script and does not use deprecated thread API. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1282021 - perl-Time-HiRes-1.9728 is available https://bugzilla.redhat.com/show_bug.cgi?id=1282021 -------------------------------------------------------------------------------- ================================================================================ plasma-workspace-5.4.3-3.fc23 (FEDORA-2015-6b56dfe6d7) Plasma workspace, applications and applets -------------------------------------------------------------------------------- Update Information: plasma-workspace-5.4.3-3.fc23 - Fix changing of visibility for system tray entries Resolves: kdebz#355404 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1282417 - plasma system tray settings dialog broken https://bugzilla.redhat.com/show_bug.cgi?id=1282417 -------------------------------------------------------------------------------- ================================================================================ python-importmagic-0.1.3-5.033e3efgit.fc23 (FEDORA-2015-5fc1de129a) Python library to auto-magically add, remove and manage imports -------------------------------------------------------------------------------- Update Information: Update to git snapshot to fix various bugs. -------------------------------------------------------------------------------- ================================================================================ python-xlrd-0.9.4-1.fc23 (FEDORA-2015-f2d4530211) Library to extract data from Microsoft Excel (TM) spreadsheet files -------------------------------------------------------------------------------- Update Information: Update to new version (bz#1282234) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1282234 - Version 0.9.4 is avalible https://bugzilla.redhat.com/show_bug.cgi?id=1282234 -------------------------------------------------------------------------------- ================================================================================ qtspell-0.8.1-1.fc23 (FEDORA-2015-ae4e34478b) Spell checking for Qt text widgets -------------------------------------------------------------------------------- Update Information: Update to version 0.8.1, see https://github.com/manisandro/qtspell/releases/tag/0.8.1 for details. -------------------------------------------------------------------------------- ================================================================================ tunir-0.12-1.fc23 (FEDORA-2015-3c4f983d35) An ultra light CI system -------------------------------------------------------------------------------- Update Information: Updates to 0.12 release ---- Updates to 0.8 release ---- Updates to 0.7 release -------------------------------------------------------------------------------- ================================================================================ wine-1.7.55-1.fc23 (FEDORA-2015-931872248d) A compatibility layer for windows applications -------------------------------------------------------------------------------- Update Information: * Pulse audio driver. * Various fixes for Microsoft Office 2013 support. * Some more implementation of the Web Services DLL. * More fixes for the latest C runtime version. * Improvements to the Makefile generation. * Various bug fixes. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1281988 - wine-1.7.55 is available https://bugzilla.redhat.com/show_bug.cgi?id=1281988 -------------------------------------------------------------------------------- ================================================================================ xorg-x11-server-1.18.0-2.fc23 (FEDORA-2015-2a67752b43) X.Org X11 X server -------------------------------------------------------------------------------- Update Information: - Fix Xorg.wrap kms detection to so that the server does not always run as root -------------------------------------------------------------------------------- ================================================================================ yubico-piv-tool-1.1.2-1.fc23 (FEDORA-2015-42d86cf1e7) Tool for interacting with the PIV applet on a YubiKey NEO -------------------------------------------------------------------------------- Update Information: Update to 1.1.2 (#1281987) ---- Update to 1.1.1 (#1280522) ---- This update brings new upstream release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1280522 - yubico-piv-tool-1.1.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1280522 [ 2 ] Bug #1281987 - yubico-piv-tool-1.1.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1281987 -------------------------------------------------------------------------------- ================================================================================ yubikey-personalization-gui-3.1.23-2.fc23 (FEDORA-2015-b5d97718b4) GUI for Yubikey personalization -------------------------------------------------------------------------------- Update Information: yubikey-personalization-gui-3.1.23-2.fc23 - Update to 3.1.23 -------------------------------------------------------------------------------- ================================================================================ zanata-parent-25-2.fc23 (FEDORA-2015-08831fabc9) The Project Object Model(pom) files for the Zanata packages -------------------------------------------------------------------------------- Update Information: - The resteasy.version is 3.0.6.Final ---- - Upstream update to 25. - RHEL uses resteasy-base-resteasy-pom instead. -------------------------------------------------------------------------------- -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test